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60+% 22,000: 5578 


OF U.S. FRANCHISE ACTIVE U.S. DEALERS VEHICLE VALUES 
DEALER WEBSITES 


SOLD ANNUALLY 
Operated by Dealer.com 


On the Dealertrack Network Through Manheim 


47.7M+ 3.8M+ 67% 


UNIQUE VISITORS MONTHLY SERVICE 


O 
APPOINTMENTS CAR BUYERS 
Monthly on 13,000+ Xtime 2016 Use Autotrader 
Dealer.com Websites Monthly Average or KBB.com 


48% 100+ 43M+ 


OF ALL U.S. CARS SOLD 


COUNTRIES FINANCED TITLES 
Submitted to Lenders with Across 6 Continents Managed By 
+ Dealertrack Technology Global DMS Clients 
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A leading provider of products and services that connect the automotive ecosystem worldwide 


otorm of acquisitions 
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Challenges ЧИ 


Some Agile/DevOps 
Varying levels of maturity 
25+ Independent businesses 
350+ Scrum teams 
650+ AWS accounts 
40+ Datacenters 


100’s of Internet-facing 
applications 


1000’s of microservices 


Lack of standardization 
across businesses 


somewhere, 
over the 
rainbow... 
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e Cloud-first strategy 
e 5 data centers 

e DevSecOps/Shitt left 
° Security as a Service 
e Automation 

« Standardized 


technologies and 
processes 
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Tracking assets 


Security testing 


Tracking vulnerabilities 
Access management 


Segregation of duties m 


Configuration standards 


Resiliency 
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Integrating | the ES old security | 


processes into the new world will not work 


Nes = oy 
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Make security easily accessible 
and consumable. Put it in the hands 
of your engineering teams so they can 


make it a part of their processes. 
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Amazon Machine Image Ѕсаппіпс 


Scheduled 
Function 


Puts msg on 
Amazon sos > 


OS fingerprint plus config info are 
sent for analysis and NVD scoring 


Amazon SNS 


EC2 
Triggers Instances 
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01.17 Windows AMI 
RHEL AMI 
сро | оо 


02.17 amazon marke {расе 


passing Qualys 
AMI-ID Agent 
installed 


Approved list updated 
(add/remove/alert) 


T2 Burstable performance instance 
(t2.micro or min. required by OS+Agent) 


Amazon DynamoDB table with 
Current CAl-approved AMIs 
: Job 

2 Jenkins initiated 

Terraform = 

state files 

Terraform laC to Agent binaries and 
launch EC2 instance ©» © is) €—— (9 other scanning artifacts 
based on new AMI-ID 


GitHub Amazon S3 


Bucket 
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CloudSploit inspects AWS 
infrastructure for AMIs and 
reports against Dynamo DB list 
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CloudWatch Event Lambda Amazon EC2 
раса function 
(event-based) Systems Manager 
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JFrog Artifactory Qualys. CROWDSTRIKE Je 


Amazon EC2 


Cox AUTOMOTIVE" 


Qualys at Cox 
Automotive 


* Near real-time alerts 
(Slack/Rally/JIRA) 


* Approved AMI 
Marketplace 


Cultural Shift 


* Partnership 
(Engineering and Security) 


e Shared Goals 
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Thank You 


Patricia Smith Tabrez Naqvi 
COX AUTOMOTIVE" VP, Chief Information Security Officer Sr. Manager, Security Operations 


